Privacy Notice

Effective 26 September 2026.

Who is responsible for your data

IMS House Grzegorz Zięba, Podleszany 452, 39-300 Mielec, Poland (NIP 8171927156, REGON 180321820) is the data controller for the personal data described here. Contact: hello@furhaps.com.

Paddle is the merchant of record for purchases and is a separate, independent controller for your payment and billing data. We never see or store your card details. See Paddle's privacy notice.

What we collect

• Your email address — to send your questionnaire link, your keepsake and order updates, and — because you are our customer — occasional messages about your keepsake and related Furhaps products and services, which you can stop at any time (see Your rights).
• What you tell us about your dog — name, memories, personality, the things you type into the questionnaire. This is the raw material of the keepsake.
• Photographs you upload — stored in private storage, not publicly accessible. Location and camera metadata is stripped before the photograph is stored.
• Order and payment references — an order ID we generate, and the transaction reference and order confirmation we receive from Paddle.
• Site usage, experiment and attribution data — with your analytics consent, which version of the site you saw (we test prices and page designs; without that consent you see our standard version), and, with your advertising consent, where you arrived from: campaign tags and click identifiers in the link you followed, and the referring site.
• Your privacy choices — what you chose, when, and at which step (sign-up, checkout or the settings below), stored in a cookie and, once you have an order, on that order as the record of what governed what we sent.
• A shortened one-way hash of your IP address, stored on your order to limit abuse of the sign-up form. We do not store the address itself.

Analytics and advertising — specifically what leaves this site

With your analytics consent, we use Google Analytics 4. With your advertising consent, we load the Meta Pixel in your browser and send advertising-measurement events to Meta's Conversions API from our server. Until you have chosen, none of these tools loads and none of these events is sent. What is sent, and when:

Only three events reach Meta's Conversions API from our server: "Lead", "InitiateCheckout" and "Purchase". The email hash is a one-way cryptographic hash, which Meta can match against an existing account. We do not send your IP address to Meta or Google from our server; the browser tags see your IP address as any web request does. We never send your dog's story, your questionnaire answers, your photographs or the private link to your keepsake to any advertising or analytics tool. Of your photographs, only how many there are is ever sent — never a photograph, its file name, its size or where it is stored. We do this to measure whether our advertising works and which version of the site works better.

When enabled with the relevant consent, Google and Meta may collect information about your activity on Furhaps and across other websites or services, as described in their privacy notices.

Separately from these tools, and whatever you choose, our own database keeps two kinds of first-party records. The first is a count of which step of the order flow was reached, with the site version where one was assigned, and, at the short-form step, how many of its three memory questions had an answer (a number from 0 to 3, never the answers); it carries no identifier for you and uses no cookie. The second is the history of an order itself — sign-up, checkout started, payment, any refund or chargeback notice, questionnaire received, delivery — stored against that order's ID, so it is linked to your order record and kept for as long as that record is (see "How long we keep it"). If a request to Paddle fails while a checkout for your order is being set up, that history also records why in technical terms — the kind of failure, its status code, and the request reference and retry time Paddle's servers returned — never your email address or card details. It is linked to your order and kept with it in the same way, and it is never sent to Google, Meta or any other analytics or advertising tool. We use both to see how the site performs and to reconcile orders.

Cookies

Your privacy choices

You can reject optional analytics and advertising, or withdraw your consent at any time, here or through the Privacy settings link at the bottom of every page. Your choice does not affect your order. We do not load these optional tools or send these advertising events unless you have given the relevant consent. When you change your choice the page reloads with it applied, so no tag keeps running and no further events are sent; we also remove our own analytics and attribution cookies, and cookies Google or Meta have already set can be cleared in your browser. Events already sent before you withdrew are not recalled.

If your browser sends a Global Privacy Control signal, we treat it as a refusal of advertising, whatever you chose here. We do not currently respond to browser "Do Not Track" signals. Browser content blockers may block browser scripts, but they do not reliably stop server-side events — the consent above does.

Who receives your data

• Cloudflare — hosting, the database, and photograph storage (our processor).
• Paddle — payments, as merchant of record and an independent controller. We send Paddle your email address to open the checkout; Paddle sends us the order confirmation and transaction reference.
• Resend — sending you email (our processor).
• AI providers — image and text generation used while making your keepsake. Text tools receive your dog's name and the facts you gave us, never a photograph, your email or your order details; image tools receive the photograph as a likeness reference. We use only tools that do not train on submitted material, that document how long they keep it, and that keep it private. Unless you separately and explicitly opt in, neither we nor these providers use your photographs or words to train AI models.
• Google — analytics, as our processor under Google's data-processing terms.
• Meta — advertising measurement. For the collection and transmission of advertising-event data described above, we and the applicable Meta entity act as joint controllers under Meta's Controller Addendum. We are responsible for the information and consent controls on Furhaps; Meta's responsibilities and its subsequent processing are explained in that addendum and in Meta's Privacy Policy. You may exercise your data-protection rights against either joint controller.

International transfers

Some of the providers above process personal data outside the European Economic Area.

Certifications are as at the effective date; we check a provider's current status when we start using it. You can request information about the safeguards, including a copy where applicable, at hello@furhaps.com.

Why we are allowed to use it

We use your email address, order information and submitted material where necessary to make, deliver and support your keepsake under our agreement with you. We need your email address and the material required to make your keepsake; without them, we cannot complete and deliver the order. Optional information is identified as optional.

We keep the order and payment records described below on the basis of our legitimate interest in answering for each payment — refunds, chargebacks and legal claims — and we use the minimum information necessary for security, fraud prevention and the prevention of abuse (the hashed IP address, the signed order-access cookie) on the basis of our legitimate interests, after considering the effect on your privacy.

Optional analytics, advertising measurement — including Meta's server-side events — and any other optional marketing use your consent, which you may withdraw at any time. Once you have bought a keepsake we may email you about it and about related Furhaps products and services on the basis of our legitimate interest in keeping in touch with our customers; every such message tells you how to stop them, and you may object at any time (see Your rights), which we honour at once.

Where material you submit includes personal information about someone else, we receive it from you. We process it only where necessary for the private keepsake, relying on our and your legitimate interests in providing it, and only where those interests are not overridden by that person's rights and interests. The rights and safeguards in this notice apply to their information too. Please do not tell us about anyone's health, beliefs or other sensitive matters unless the story needs it; if you do, we use it only for the keepsake and remove it on request.

How long we keep it

• Your email address, your dog's details and your photographs stay on our systems while we make and support your keepsake, and afterwards so that your story link keeps working, until you ask us to delete them (below).
• Working files made while producing your keepsake — copies of your photographs, drafts, alternative illustrations and renders — are kept in private storage for as long as your story link is active, so that we can support your keepsake and, on request, correct or re-make it without asking for your material again; they are deleted when you ask us to delete your data (below).
• Order records — the order ID, dates, status, amounts and currency, the site version you saw, production-time and cost figures, your privacy choices and the Paddle transaction reference — are kept for as long as a refund, chargeback or legal claim about the order could still be raised or need to be answered. We do not currently apply a fixed deletion date to these records; that criterion is the rule we use.
• Support correspondence is kept for as long as needed to handle your question and any follow-up claim about the same order.
• Backups: data deleted from our database can remain in the database provider's point-in-time restore copies for up to 30 days.

When you ask us to delete your data, we erase your email address, your dog's details, your photographs, the working files described above — drafts, alternative illustrations and renders — the attribution data and the hashed IP address, unless a legal exception allows or requires us to retain something — and we tell you what we retain and why. We keep the Paddle transaction reference and the order record above, because they are what a later refund, chargeback or legal claim about the payment is reconciled against. That reference can still be linked to you through Paddle's records, so what remains is pseudonymised, not fully anonymous — we would rather say so than claim more than we do. Paddle separately decides how long it must keep its own records.

Your rights

You have the rights of access, correction, deletion, restriction, objection and portability, and the right to withdraw consent. These rights apply subject to the conditions in data-protection law. Email hello@furhaps.com; we normally respond within one month, and if a permitted extension is needed we explain why within that first month.

You can withdraw analytics or advertising consent through Privacy settings, and other consent by emailing us. Withdrawal does not make earlier processing based on valid consent unlawful.

You may object to processing based on legitimate interests on grounds relating to your particular situation. You may object to the use of your personal data for direct marketing at any time.

You can also complain to us about our handling of your data at hello@furhaps.com. We will acknowledge your complaint within 30 days, investigate without undue delay, keep you informed where appropriate and tell you the outcome. You may also complain to a supervisory authority: in Poland, the President of the Personal Data Protection Office (UODO); in the UK, the ICO where UK data-protection law applies; or the authority where you live.

California and other US states

We do not sell personal information for money. The advertising measurement described above may count as "sharing" or targeted advertising under some US state privacy laws; you can opt out of it through Privacy settings or by sending a Global Privacy Control signal, and you may ask us at hello@furhaps.com to access, correct or delete your information. We will not treat you differently for exercising these rights.

Children

Furhaps is for adult purchasers. We do not knowingly accept orders or questionnaire responses directly from children. Material submitted by adults may contain personal information about children, and the safeguards and rights in this notice apply to that information too.

Changes

We will update this notice when what we do changes, and change the date at the top.